StealEmojiPolicy: Sanitize shortcodes (thanks to Hazel K for the report)